This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: pXsdZjs18uikNdXerta3TSvJikGtK1Pw0R5Fh1nJx1o= Subject key identifier: 28:3B:F3:0E:8D:86:48:4B:29:AC:26:2E:75:A3:66:53:E0:1D:CE:C4 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1209 Signing time: Sat 06 Dec 2025 18:42:05 +0000 Manifest this update: Sat 06 Dec 2025 18:42:04 +0000 Manifest next update: Sat 13 Dec 2025 18:42:04 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: HGxEXFGgAqD/MUkZ3eI2tvTCqbmsjXJJKjqZwLZDEFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Dec 6 18:42:04 2025 GMT Not After : Dec 13 18:42:04 2025 GMT Subject: CN=693478fd-4e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:b6:24:8e:84:5a:9b:22:a7:d8:d9:06:da: 93:8d:23:7e:49:4a:05:12:64:1d:1e:d3:db:9a:07: b9:1f:7f:77:56:b4:9c:17:3b:ed:4f:90:76:c1:cd: c7:4f:ec:cd:79:0b:5c:83:db:0f:4a:ad:a6:27:18: a3:c5:56:90:aa:15:5d:83:c6:3e:89:df:e0:49:04: 4e:90:28:b7:a3:2c:bc:f2:b1:be:2f:57:10:b2:b4: 84:35:8d:af:e6:ac:53:cb:b1:26:7a:df:60:7b:00: 78:5b:96:06:8b:cc:00:74:de:0b:61:c7:37:af:b6: 88:58:a1:93:19:58:9c:4c:56:19:d2:3e:af:05:e8: cb:b2:3c:90:0d:68:4c:ab:75:7d:1d:06:75:eb:58: 04:cf:ab:2c:27:89:ea:d1:e0:55:b6:fa:72:86:57: 40:15:47:00:c8:65:6b:8d:ef:51:69:ce:60:4f:a0: 3d:59:e7:db:9d:c2:10:6f:4d:b7:45:f4:91:fd:7a: 78:e5:c9:49:cc:bd:1a:8f:9a:1b:44:1e:9f:1e:7a: a5:5b:d3:f2:cf:15:63:19:8c:3d:2d:2f:93:5b:3a: 87:68:0d:37:69:e6:d7:a1:50:8b:36:59:27:54:b7: b2:26:f3:2e:f3:e2:01:fb:4e:e4:15:74:12:67:68: 8e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:F3:0E:8D:86:48:4B:29:AC:26:2E:75:A3:66:53:E0:1D:CE:C4 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bc:66:80:6c:c5:cb:38:82:8e:ce:f7:e3:45:2d:01:ae:a1: 17:da:40:69:0c:db:fe:ba:8b:e4:87:5f:65:7c:ca:56:06:e1: d1:da:f1:4c:b7:c0:33:be:2c:28:df:fb:18:e3:9e:88:fe:9c: ce:37:7b:90:2d:a3:be:c3:dd:ab:2c:c7:b3:a0:6d:18:cb:09: af:ba:3b:45:c8:b8:bd:a8:25:37:57:a5:94:d8:9e:bf:17:b5: 24:5d:66:1a:0c:7d:ca:5e:b1:34:5e:2b:a8:f8:5b:a5:f4:33: f6:0f:8b:b9:2c:95:41:a5:3b:33:b4:98:ee:42:31:1c:cd:46: 85:6d:62:98:67:7f:e3:ca:b9:8b:97:c4:ed:82:63:bb:b9:85: a5:8d:fb:7c:d9:a6:9b:2c:6f:66:ed:f1:5f:f6:5f:e9:f9:29: f2:ba:86:56:95:f0:77:a7:82:a9:fd:fa:24:84:e0:f7:84:5a: f5:ee:ed:07:b9:2e:8d:19:f1:e8:bb:66:d9:c6:20:38:50:5e: c3:2d:17:be:c0:af:52:67:cf:98:32:28:b8:34:07:b4:47:02: f9:48:b9:32:89:b9:84:de:ea:72:6c:7a:22:25:04:43:64:a3: 24:bb:ef:87:7a:69:02:10:b0:b6:69:ce:d2:c4:17:72:4a:73: 51:ea:1f:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUxMjA2MTg0MjA0WhcNMjUxMjEzMTg0MjA0WjAYMRYwFAYD VQQDEw02OTM0NzhmZC00ZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW+2JI6EWpsip9jZBtqTjSN+SUoFEmQdHtPbmge5H393VrScFzvtT5B2wc3H T+zNeQtcg9sPSq2mJxijxVaQqhVdg8Y+id/gSQROkCi3oyy88rG+L1cQsrSENY2v 5qxTy7Emet9gewB4W5YGi8wAdN4LYcc3r7aIWKGTGVicTFYZ0j6vBejLsjyQDWhM q3V9HQZ161gEz6ssJ4nq0eBVtvpyhldAFUcAyGVrje9Rac5gT6A9WefbncIQb023 RfSR/Xp45clJzL0aj5obRB6fHnqlW9PyzxVjGYw9LS+TWzqHaA03aebXoVCLNlkn VLeyJvMu8+IB+07kFXQSZ2iOWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg78w6N hkhLKawmLnWjZlPgHc7EMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdvGaAbMXLOIKOzvfjRS0BrqEX2kBpDNv+uovkh19lfMpWBuHR2vFM t8Azviwo3/sY456I/pzON3uQLaO+w92rLMezoG0YywmvujtFyLi9qCU3V6WU2J6/ F7UkXWYaDH3KXrE0Xiuo+Ful9DP2D4u5LJVBpTsztJjuQjEczUaFbWKYZ3/jyrmL l8TtgmO7uYWljft82aabLG9m7fFf9l/p+SnyuoZWlfB3p4Kp/fokhOD3hFr17u0H uS6NGfHou2bZxiA4UF7DLRe+wK9SZ8+YMii4NAe0RwL5SLkyibmE3upybHoiJQRD ZKMku++HemkCELC2ac7SxBdySnNR6h/b -----END CERTIFICATE-----Generated at Sun Dec 7 03:40:17 2025 by rpki-client